test: cover atomic source invites

2026-07-19 13:04:49 +08:00
parent 71b6402bd8
commit ec48836dc9
4 changed files with 40 additions and 3 deletions
@@ -18,6 +18,7 @@
 ### Fixed

 - Tightened standard webhook signature validation to reject invalid timestamps and non-v1 signature schemes.
+- Made source invitation consumption atomic so a token cannot be accepted twice during concurrent requests.

 ## [0.7.0] - 2026-07-19